CVE-2024-49845

Memory corruption during the FRS UDS generation process...

CVE-2024-49845 Improper Input Validation in HLOS

Memory corruption during the FRS UDS generation process...

CVE-2024-49845 Improper Input Validation in HLOS

Memory corruption during the FRS UDS generation process...

CVE-2024-49845

CVE-2024-49845 is described as memory corruption during the FRS UDS generation process in Qualcomm chipsets (HLOS/Qualcomm components context). The issue is concrete in multiple sources (CVE records, vendor records and third‑party enrichments) and is classified with a high impact score in CVSS v3...

PT-2025-19865 · Qualcomm · Snapdragon +128

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption during the FRS UDS generation process. This corruption occurs as part of the process, indicating a potential problem with how data is handled or processe...

CVE-2024-23369

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers...

CVE-2024-23369

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers...

CVE-2024-23369 Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers...

CVE-2024-23369

CVE-2024-23369 describes a memory corruption issue in Qualcomm chipsets triggered when an invalid length is provided for HLOS-facing FRS/UDS buffers. The root cause is a boundary/length handling defect that can affect the memory region when processing those buffers. The CVE is rated with CVSS v3....

CVE-2024-23369 Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers...

GO-2022-0500 CloudCore UDS Server: Malicious Message can crash CloudCore in github.com/kubeedge/kubeedge

CloudCore UDS Server: Malicious Message can crash CloudCore in github.com/kubeedge/kubeedge...

CVE-2024-6348

Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima 2022 allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests...

CVE-2024-6348 Predictable seed generation after ECU reset

Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima 2022 allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests...

CVE-2024-6348

CVE-2024-6348 affects the Nissan Altima 2022 Blind Spot Protection Sensor ECU, specifically the UDS security access seed generation. The root cause is predictable seed generation, enabling an attacker to forecast the requested seeds and bypass security controls by repeatedly resetting the ECU and...

CVE-2024-6347

Unprotected privileged mode access through UDS session in the Blind Spot Detection Sensor ECU firmware in Nissan Altima 2022 allows attackers to trigger denial-of-service DoS by unauthorized access to the ECU's programming session. No preconditions implemented for ECU management functionality...

CVE-2024-6347 Unauthorized access to ECU functionality

Unprotected privileged mode access through UDS session in the Blind Spot Detection Sensor ECU firmware in Nissan Altima 2022 allows attackers to trigger denial-of-service DoS by unauthorized access to the ECU's programming session. No preconditions implemented for ECU management functionality...

CVE-2024-6347

The CVE-2024-6347 issue affects Nissan Altima (2022) with the Blind Spot Detection Sensor ECU firmware. It describes an unprotected UDS session enabling privileged-mode access, allowing unauthorized DoS-inducing commands and disruption of ECU operations without authentication. Several sources rei...

CVE-2023-28899

By sending a specific reset UDS request via OBDII port of Skoda vehicles, it is possible to cause vehicle engine shutdown and denial of service of other vehicle components even when the vehicle is moving at a high speed. No safety critical functions affected...

CVE-2023-28897

The secret value used for access to critical UDS services of the MIB3 infotainment is hardcoded in the firmware. Vulnerability discovered on Škoda Superb III 3V3 - 2.0 TDI manufactured in 2022...

CVE-2023-28897

CVE-2023-28897 affects Škoda MIB3 infotainment. The vulnerability stems from a hardcoded secret value used to access critical UDS services, impacting Škoda Superb III (3V3) 2.0 TDI (2022). According to NVD, CVSSv3.1 base score 9.8 (Network, high impact on confidentiality, integrity, availability)...